diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 11f71b9..66bf34d 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -1,5 +1,8 @@
 name: Publish to NPM
 
+permissions:
+  contents: write
+
 # Manually triggered workflow
 on:
   workflow_dispatch: {}
@@ -15,6 +18,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3
+        env:
+          GH_TOKEN: ${{ github.token }}
 
       - name: Setup Node.js
         uses: actions/setup-node@v3
diff --git a/js/readme.md b/js/readme.md
index 7eb23db..90aef79 100644
--- a/js/readme.md
+++ b/js/readme.md
@@ -109,4 +109,6 @@ Now, you can use the `local file fetcher` right out of the box.
 3. `npm i`
 4. `npm run test` to run the tests
 
-Note: just FYI, the circuit files are symlinked to the root of the repo (i.e. `resources` & `bin` folders). So during local dev, the default local fetching works right out of the box.
\ No newline at end of file
+Note: just FYI, the circuit files are symlinked to the root of the repo (i.e. `resources` & `bin` folders). So during local dev, the default local fetching works right out of the box.
+
+To publish the package, we've a Github Action that will build the package & publish it to the Github Package Registry. It can be manually triggered by running the workflow `Publish to NPM` in the Actions tab.
\ No newline at end of file